{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-07-13","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","catalog_reconciliation":{"basis":"Documented actions on the identified catalog surface; not an execution test.","confidence":"medium","evidence_completeness":"partial","previous":{"confidence":"low","detail_sha256":"ac2f1351ae61cd5420fe83080847e60a385cf0a36d7b752306c4cdf2b5f92e1b","risk":"high"},"proposal_file":"parent-proposals.json","rationale":"First pass High retained. The High is evidenced but the visible cards max at Medium. Publisher knowledge-base articles enumerate write_operation effects in the user's Exact Online administration: purchase and correction bookings, processing credit-card statements into bookings, sales invoices, purchase orders, converting quotes to orders, changing payment terms and sales prices, stock corrections; delete actions exist (admins can block them) with per-user daily write limits. Writes are staged as drafts and posted after user approval. Approved postings change the general ledger and invoices, which is financially consequential. Scope: the connected Exact administrations, within the user's Exact roles. Approval lowers likelihood, not capability. 'runs_code' Low is a mislabel for a generic API gateway.","review_key":"claudesec:70025845-0f81-49fa-a5d3-2335cb072220","reviewed_at":"2026-10-12","runtime_verified":false,"sources":["https://www.iwebdevelopment.com/kennisbank/tag/ai","https://www.iwebdevelopment.com/kennisbank/gegevens-aanmaken-chatgpt-exact-online-mcp","https://www.iwebdevelopment.com/kennisbank/veilig-werken-ai-mcp-koppeling","catalog-rating-review-2026-10-12/batches/batch-002.jsonl"],"status":"resolved"},"category":"Web Connector","confidence":"low","description":"Exact Online AI Connect brings business records and operations into Claude. Analyze finance, inventory, sales, purchasing, customers, and suppliers. Every write is prepared as a draft and requires explicit confirmation before execution.","did":"70025845-0f81-49fa-a5d3-2335cb072220","documentation_url":"https://www.iwebdevelopment.com/kennisbank/tag/ai","editorial_description":{"extended_description":"Connect your own Exact Online account and select authorized administrations. Supported workflows include draft journals, invoices and purchase orders, relationship updates, and reorder-level changes. iWebDevelopment operates the connector through Exact's API.","schema_version":1,"summary":"Exact Online AI Connect brings business records and operations into Claude.\nAnalyze finance, inventory, sales, purchasing, customers, and suppliers.\nEvery write is prepared as a draft and requires explicit confirmation before execution."},"homepage_url":"","icon":"https://www.iwebdevelopment.com/hubfs/favicon.png","id":"70025845-0f81-49fa-a5d3-2335cb072220","installs":0,"last_scanned":"","license":"","long_description":"Connect your own Exact Online account and select authorized administrations. Supported workflows include draft journals, invoices and purchase orders, relationship updates, and reorder-level changes. iWebDevelopment operates the connector through Exact's API.","manual_assessment":"unassessed","manual_review":{"all_findings":[{"evidence":"The declared permissions call this a confirmed write action over the chosen Exact administrations.","reasoning":"It can durably alter financial/accounting records.","risk_type":"data_modification","severity":"medium","title":"Generic write operation changes Exact Online data","triggering_tools_or_skills":["write_operation"]},{"evidence":"The connector discovers the provider action surface dynamically and invokes writes generically.","reasoning":"Deletion, payments, messages, filing and admin effects cannot be classified from the packet.","risk_type":"generic_gateway","severity":"low","title":"Runtime provider capabilities and endpoints hide action semantics","triggering_tools_or_skills":["get_provider_capabilities","get_scope_endpoints","search_endpoints","write_operation"]}],"assessment_status":"provisional","auth_and_scopes":"Official Exact Online authorization inherits the user’s selected administrations and roles; write_operation requires chat confirmation, but reachable operations are not enumerated.","blocked_missing_evidence":"Complete official endpoint/action inventory with schemas and risk effects for write_operation, including deletion, invoice/payment, messaging, filing and credential/admin actions.","confidence":"low","displayed_risk":"high","evidence_completeness":"insufficient","manual_overall_risk":"unassessed","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/70025845-0f81-49fa-a5d3-2335cb072220.json","what_it_proves":"Candidate PR #125 record identity (name \"Exact Online AI Connect, by iWebDevelopment\", publisher, type web_connector) and 16 stored tool names; no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/70025845-0f81-49fa-a5d3-2335cb072220: complete tool_names inventory (16 tools), remote streamable-http endpoint https://mcp-exactonline.iwebdevelopment.com/, auth_posture auth_required, publisher-declared permissions text, directory tier community"}],"primary_reason":"Exact Online supports confirmed financial writes through a generic gateway whose underlying actions are not listed.","provisional_risk":"high","publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:70025845-0f81-49fa-a5d3-2335cb072220","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 16 tools. Publisher documentation URL was inaccessible; user confirmation reduces accidental use but does not lower the capability ceiling.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"true","browser_control":"false","credential_or_admin_actions":"unknown","deletes_data":"unknown","deployment_or_infrastructure":"unknown","dynamic_hidden_actions":"true","filesystem_or_repo_access":"false","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"unknown","sends_messages_as_user":"unknown","spends_or_moves_money":"unknown"},"tools_or_skills_reviewed":16,"tools_or_skills_total":16},"name":"Exact Online AI Connect, by iWebDevelopment","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=70025845-0f81-49fa-a5d3-2335cb072220&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://www.iwebdevelopment.com/privacybeleid","provisional_risk":"high","publication_recommendation":"fix","publisher":"iWebDevelopment","publisher_url":"https://www.iwebdevelopment.com/exact-online/ai-mcp-koppeling","remote_url":"https://mcp-exactonline.iwebdevelopment.com/","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"With write access and approval, the connector can post bookings and invoices and change orders, payment terms, prices and stock records in connected Exact Online administrations. Administrators can separately block delete operations.","evidence":"https://www.iwebdevelopment.com/kennisbank/gegevens-aanmaken-chatgpt-exact-online-mcp\n'Wat je kunt laten aanmaken of aanpassen' - Boekingen, Verkoop- en inkooporders, Voorraad\n\nhttps://www.iwebdevelopment.com/kennisbank/veilig-werken-ai-mcp-koppeling\n'verwijderacties blokkeren', 'daglimiet', draft approval","risk_type":"modifies_data","severity":"high","title":"Posts consequential accounting and invoice changes"},{"description":"The connector retrieves private ledger, invoice and administration data within the connected user’s Exact Online permissions.","evidence":"https://www.iwebdevelopment.com/kennisbank/veilig-werken-ai-mcp-koppeling\n'De assistent kan cijfers opvragen en analyses maken'","risk_type":"reads_private_data","severity":"medium","title":"Reads accounting records"}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@iwebdevelopment.com","tags":["modifies_data","reads_private_data"],"tools":[{"description":"","name":"analyze_data"},{"description":"","name":"read_operation"},{"description":"","name":"get_assistant_guidelines"},{"description":"","name":"get_divisions"},{"description":"","name":"get_entity_schema"},{"description":"","name":"get_provider_capabilities"},{"description":"","name":"get_scope_endpoints"},{"description":"","name":"get_started"},{"description":"","name":"list_administrations"},{"description":"","name":"list_available_tables"},{"description":"","name":"list_scopes"},{"description":"","name":"search_endpoints"},{"description":"","name":"select_administration"},{"description":"","name":"select_division"},{"description":"","name":"set_context"},{"description":"","name":"write_operation","risk":{"category":"state_change","level":"medium","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: It can durably alter financial/accounting records."}}],"tools_count":16,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/70025845-0f81-49fa-a5d3-2335cb072220","uuid":"aa3abb1f-0c92-5538-b070-868100add724","verification_tier":"community","version":""},"query_key":"iwebdevelopment exact online ai connect by iwebdevelopment","schema_version":1,"status":"match"}